Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/34352e3233382e39322e302f32322d3234203d3e20323638333230.roa
File:                     34352e3233382e39322e302f32322d3234203d3e20323638333230.roa (raw, json)
Hash identifier:          wRsruawm9J5e13hrGiuXc4MrQqs4JUzrCLqZF1Ign5M=
Subject key identifier:   4B:C9:76:D2:39:05:21:FD:A8:6A:F2:44:28:6E:4C:DF:CF:A3:BB:F0
Certificate issuer:       /CN=B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD
Certificate serial:       5B13E1EC0349DC00019D809778F2C2C381FFD09E
Authority key identifier: B8:16:A6:DE:EE:87:A9:7A:EC:5A:D5:8B:35:70:BA:BA:44:CF:DA:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/34352e3233382e39322e302f32322d3234203d3e20323638333230.roa
Signing time:             Thu 04 Apr 2024 08:25:12 +0000
ROA not before:           Thu 04 Apr 2024 08:20:12 +0000
ROA not after:            Thu 03 Apr 2025 08:25:12 +0000
asID:                     268320
IP address blocks:        45.238.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.crl
                          rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:13:e1:ec:03:49:dc:00:01:9d:80:97:78:f2:c2:c3:81:ff:d0:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD
        Validity
            Not Before: Apr  4 08:20:12 2024 GMT
            Not After : Apr  3 08:25:12 2025 GMT
        Subject: CN=4BC976D2390521FDA86AF244286E4CDFCFA3BBF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:60:30:8a:ec:a4:23:64:17:fb:e4:a4:e4:
                    33:dd:51:67:1b:c8:08:9b:91:ab:95:a7:ab:5f:51:
                    9a:23:01:12:3f:c5:d8:50:b3:ed:c3:4c:f5:4e:ad:
                    b4:a8:db:20:bc:af:61:a9:7f:4a:7e:11:dc:a7:8b:
                    95:d0:3f:99:0b:2b:c9:0c:85:2e:7c:f5:c8:36:f2:
                    00:18:c3:8d:9f:01:3e:74:b3:88:f1:9e:3b:7f:2d:
                    3c:d3:56:ba:a2:cc:cf:4f:26:10:bb:0e:46:20:ee:
                    d1:5a:91:d6:a0:3e:8f:08:0c:8f:40:04:ca:6b:66:
                    94:19:a4:e7:f9:76:84:85:cd:92:bf:65:48:4f:5d:
                    a6:48:05:9f:bb:94:39:13:5b:b8:18:77:2c:c8:b2:
                    8a:70:dc:ef:57:00:82:b6:da:13:90:3f:f1:50:fb:
                    c6:72:d4:14:9b:33:05:a0:a3:9c:9f:40:ed:22:cd:
                    cb:99:8a:13:f8:91:33:0f:4f:41:21:3e:2e:0f:16:
                    6c:e7:f1:78:15:e1:9b:e3:08:1d:0c:d3:af:75:eb:
                    d0:ed:6f:98:fc:44:93:08:d2:f9:bd:5f:c6:4b:cf:
                    4b:7e:51:62:c1:4e:ec:7f:7d:89:84:47:f6:cb:f6:
                    42:1c:75:6a:bc:84:1c:91:32:9e:4c:3c:47:7c:4f:
                    bc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C9:76:D2:39:05:21:FD:A8:6A:F2:44:28:6E:4C:DF:CF:A3:BB:F0
            X509v3 Authority Key Identifier:
                keyid:B8:16:A6:DE:EE:87:A9:7A:EC:5A:D5:8B:35:70:BA:BA:44:CF:DA:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/34352e3233382e39322e302f32322d3234203d3e20323638333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:45:fc:81:52:ad:1c:40:25:b6:9c:49:40:a2:fe:52:97:ca:
         18:fa:73:a5:71:b4:ac:a4:cd:99:cb:73:5a:e5:d3:80:5b:a5:
         99:a1:be:af:03:36:f3:90:c8:f1:c3:40:24:8c:0f:67:fa:23:
         d7:ab:3a:95:1f:48:67:b7:91:46:09:ca:ef:bd:0b:3c:74:82:
         f9:3d:cb:cb:00:56:20:09:bf:a1:81:00:4c:54:5e:66:f4:38:
         51:2a:84:28:49:80:1e:3b:80:be:4e:56:93:13:7a:4c:7d:cd:
         06:63:98:4c:0a:f8:cb:0d:e3:4d:eb:eb:69:e2:91:c7:5b:e0:
         2f:22:f8:da:94:4d:61:85:30:af:67:fa:b6:df:9d:5a:91:49:
         c5:09:1b:97:91:fe:e6:04:7b:fc:90:0b:d1:12:a2:68:3b:3b:
         69:a2:a6:cc:46:29:67:57:56:24:20:e9:b7:e6:ee:0e:bb:16:
         02:de:8f:6a:6c:95:94:68:f4:e1:38:36:b2:15:6f:1f:d1:b0:
         c6:53:c6:5e:12:a4:27:77:0e:be:ae:69:44:8a:5b:05:f7:65:
         1f:a4:69:5f:a6:83:74:52:b3:65:a2:8c:38:5e:0c:3a:24:19:
         bd:44:62:fe:11:0c:77:86:25:b2:5d:37:62:9b:8c:61:0d:f6:
         52:cc:a8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:03:53 2024 by rpki-client on console-fra.rpki-client.org